Printoxx Multiple Remote Buffer Overflow Vulnerabilities

Bugtraq ID:	41481
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 23 2009 12:00AM
Updated:	Dec 23 2009 12:00AM
Credit:	sandman
Vulnerable:	kornelix Printoxx 2.1.2
Not Vulnerable:

Printoxx Multiple Remote Buffer Overflow Vulnerabilities

Printoxx is prone to multiple remote buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input before copying it to an insufficiently sized memory buffer.

An attacker can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Printoxx 2.1.2 is vulnerable; other versions may be affected.

Printoxx Multiple Remote Buffer Overflow Vulnerabilities

The following proof-of-concept is available:

• /data/vulnerabilities/exploits/41481.txt

Printoxx Multiple Remote Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Printoxx Multiple Remote Buffer Overflow Vulnerabilities

References:

• Printoxx Product Page (kornelix)